Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6LCUNCQ4HdbmZ0Lru2HnDKKKok8.roa
File: 6LCUNCQ4HdbmZ0Lru2HnDKKKok8.roa (raw, json)
Hash identifier: DWFp9Q4qBTmHpK4I/Dn7mK1R2p/Ctu2BHmGguyTBLGw=
Subject key identifier: E8:B0:94:34:24:38:1D:D6:E6:67:42:EB:BB:61:E7:0C:A2:8A:A2:4F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CE1117726D5ADFBB454204EB16FD9
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6LCUNCQ4HdbmZ0Lru2HnDKKKok8.roa
Signing time: Mon 02 Jan 2023 03:35:58 +0000
ROA not before: Mon 02 Jan 2023 03:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56630
IP address blocks: 94.241.128.0/22 maxlen: 24
178.253.8.0/22 maxlen: 24
94.241.184.0/22 maxlen: 24
178.253.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e1:11:77:26:d5:ad:fb:b4:54:20:4e:b1:6f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8b0943424381dd6e66742ebbb61e70ca28aa24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:75:ad:a5:2a:6a:05:b4:40:04:64:79:f1:
23:61:e7:d0:c8:98:8f:36:fc:ec:49:26:70:c4:87:
2e:d9:f9:15:9f:ae:0e:bc:aa:71:a7:85:3e:73:5b:
0e:e7:e9:1e:00:a8:cf:e7:ae:85:0e:72:39:b1:3e:
7b:06:70:68:b7:94:75:06:77:86:e3:a9:e8:cd:b6:
24:23:6d:b1:61:60:18:84:63:c7:2e:b7:b8:53:12:
90:86:59:03:d6:37:fe:57:7b:78:18:c0:4c:1e:94:
8e:8c:8b:8e:ec:a4:6b:aa:9c:eb:1b:1a:e8:be:bb:
21:22:bd:e7:e0:0c:95:bc:d4:a2:63:fd:c5:95:36:
18:7e:22:01:dc:1d:15:0b:2f:f3:a0:aa:cf:64:b3:
66:4d:76:a2:bf:c7:23:14:30:c4:c7:f0:d9:16:6f:
27:de:ee:a3:f5:86:04:39:e6:c8:e1:64:13:f7:d2:
b3:ac:7f:07:78:0a:c8:50:ac:2f:f4:e7:b6:9b:22:
0f:c6:37:01:75:1e:31:80:47:82:6d:9d:d8:f6:f3:
8d:53:82:8f:ea:90:e5:7f:d5:02:c6:3f:53:3b:ed:
ad:47:27:c9:54:bf:f5:fb:1b:d0:a6:2a:ce:44:42:
86:95:09:45:c7:82:66:06:a4:92:23:e7:a9:f0:18:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:94:34:24:38:1D:D6:E6:67:42:EB:BB:61:E7:0C:A2:8A:A2:4F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6LCUNCQ4HdbmZ0Lru2HnDKKKok8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.128.0/22
94.241.184.0/22
178.253.8.0/22
178.253.48.0/22
Signature Algorithm: sha256WithRSAEncryption
37:d3:cf:85:61:be:56:d0:37:6b:0e:93:13:fe:50:1c:76:5b:
ad:db:f8:20:0c:34:8a:c8:cc:fc:fa:69:cd:07:c7:10:84:2d:
4f:e9:aa:da:a5:93:42:a2:a6:b9:41:b9:82:df:dd:30:cd:44:
72:a7:65:dd:a2:14:14:99:69:98:64:07:30:e4:be:14:68:55:
cb:72:d7:5c:22:38:3b:9a:bd:3c:19:12:06:ba:3a:d7:12:c4:
13:57:13:48:38:41:d8:cd:6c:45:eb:8c:cb:0e:00:52:98:0c:
06:43:db:ed:ac:4b:f9:fb:c6:c8:7a:13:78:e5:48:9b:f4:d1:
12:80:97:85:c2:c5:98:66:a5:47:cd:87:1e:d5:32:36:f9:3e:
d7:1d:ae:13:60:fc:39:e9:53:c1:a2:74:74:d7:e3:55:4b:fd:
a4:fb:2c:79:09:8a:de:aa:db:3b:ac:52:2c:a4:07:d6:8f:4a:
e3:9f:05:58:42:a9:56:e7:a4:2f:8d:7b:b3:86:ac:4e:e6:96:
a9:24:f2:cc:6f:fa:a9:45:cf:9f:cb:64:a5:0b:16:77:4b:e2:
cd:ab:0d:6c:36:f5:20:56:d4:33:a6:e2:f3:97:42:2f:40:15:
75:94:9c:2b:7d:95:b1:e0:58:06:6c:b9:1d:a2:aa:2b:32:f9:
95:82:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org